Design/Logic Flaw

Out of bound write can occur in radio measurement request if STA receives multiple invalid rrm measurement request from AP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8096AU, MSM8998, Nicoba...

CVE-2019-14131

CVE-2019-14131 is an out-of-bounds write in the WLAN radio measurement handling (rrm) when a station receives multiple invalid rrm measurement requests from an AP. Affected Qualcomm Snapdragon platforms include Snapdragon Auto/Compute/Consumer IOT/Industrial IOT/Mobile, e.g., APQ8053, APQ8096AU, ...

CVE-2019-14131

Out of bound write can occur in radio measurement request if STA receives multiple invalid rrm measurement request from AP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8096AU, MSM8998, Nicoba...

CVE-2019-14131: Out-of-bounds Write

Out of bound write can occur in radio measurement request if STA receives multiple invalid rrm measurement request from AP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8096AU, MSM8998, Nicoba...

PT-2020-9539

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to an out of bound write that can occur in radio measurement requests. This happens when a station STA receives multiple invalid radio resource...

CVE-2020-2943

CVE-2020-2943 affects Oracle Financial Services Applications Liquidity Risk Measurement and Management, UI component. Affected versions: 8.0.7 and 8.0.8. Vulnerability allows a low-privileged attacker with network access via HTTP to compromise the system, enabling unauthorized creation, deletion ...

PT-2020-2378

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Liquidity Risk Measurement and Management versions 8.0.7 through 8.0.8 Description The issue is related to a lack of protection for service data in the User Interface component of Oracle Financial Services Liquidity...

CVE-2020-2943: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Liquidity Risk Measurement and Management product of Oracle Financial Services Applications component: User Interface. Supported versions that are affected are 8.0.7 and 8.0.8. Easily exploitable vulnerability allows low privileged attacker with...

UBUNTU-CVE-2020-10941

Arm Mbed TLS before 2.16.5 allows attackers to obtain sensitive information an RSA private key by measuring cache usage during an import...

The Ultimate Security Budget Excel Template

Sound security budget planning and execution are essential for the CIO’s/CISO’s success. Now, for the first time, The Ultimate Security Budget Plan & Track Excel template download here provides security executives a clear and intuitive tool to keep track of planned vs. actual spend, ensuring that...

Denial of Service Vulnerability in iPACS-5772 at Jiangsu Jinzhi Technology Co.

iPACS-5772 is a measurement and control device with remote control, telemetry, telecommunication functions, logic blocking function, programmed operation function, device self-test, time-alignment function, and the device is equipped with software time-alignment and hardware time-alignment...

Denial of Service Vulnerability in PRS-7741 Measurement and Control Unit of Changyuan Shamrui

Changyuan Shamrui PRS-7741 measurement and control device is a measurement and control equipment with telemetry, telecommunication, remote control, remote adjustment and other remote functions using Vxworks operating system. A denial of service vulnerability exists in the PRS-7741 measurement and...

Jiangsu Jinzhi Technology Co., Ltd. iPACS-5772 suffers from denial-of-service vulnerability (CNVD-2020-01593)

iPACS-5772 is a measurement and control device with remote control, telemetry, telecommunication functions, logic blocking function, programmed operation function, device self-test, time-alignment function, and the device is equipped with software time-alignment and hardware time-alignment...

Denial of Service Vulnerability in UDC-301CE Measurement and Control Unit (NVD-C-2019-210341)

UDC-301CE measurement and control device is a digital measurement and control device to realize line or transformer interval measurement and control function. A denial of service vulnerability exists in the UDC-301CE, which can be exploited by an attacker to cause a system crash...

Denial of Service Vulnerability in UDC-301CE Measurement and Control Device (CNVD-2020-01581)

UDC-301CE measurement and control device is a digital measurement and control device to realize line or transformer interval measurement and control function. A denial of service vulnerability exists in the UDC-301CE, which can be exploited by an attacker to cause a system crash...

Denial of Service Vulnerability in DMP3391 Measurement and Control Device

The DMP3391 is a monitoring device adapted to the different requirements of substations and power plants of all voltage levels. A denial of service vulnerability exists in the DMP3391, which can be exploited by an attacker to cause a system crash...

Denial of Service Vulnerability in UDC-301CE Measurement and Control Unit

UDC-301CE measurement and control device is a digital measurement and control device to realize line or transformer interval measurement and control function. A denial of service vulnerability exists in the UDC-301CE, which can be exploited by an attacker to cause a system crash...

Ships engines, a guide for pen testers

I spent several years as a ships engineer before straying in to pen testing. Ships used to be fairly secure; they were physically isolated at sea. Satcoms were scarily expensive, usually available only to the captain for business-critical communication. Even satphone use was heavily rationed. All...

CVE-2019-12331

PHPOffice PhpSpreadsheet before 1.8.0 has an XXE issue. The XmlScanner decodes the sheet1.xml from an .xlsx to utf-8 if something else than UTF-8 is declared in the header. This was a security measurement to prevent CVE-2018-19277 but the fix is not sufficient. By double-encoding the the xml...

CVE-2019-12331

PHPOffice PhpSpreadsheet before 1.8.0 has an XXE issue. The XmlScanner decodes the sheet1.xml from an .xlsx to utf-8 if something else than UTF-8 is declared in the header. This was a security measurement to prevent CVE-2018-19277 but the fix is not sufficient. By double-encoding the the xml...